Skip to main content
← All vulnerabilities
CVE-2017-4943

VMware vCenter Server Appliance (vCSA) (6.5 before 6.5 U1d) contains a local privilege escalation vulnerability via the 'showlog' plugin.

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub

Summary

VMware vCenter Server Appliance (vCSA) (6.5 before 6.5 U1d) contains a local privilege escalation vulnerability via the 'showlog' plugin. Successful exploitation of this issue could result in a low privileged user gaining root level privileges over the appliance base OS.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • VMware vCenter Server Appliance (vCSA)

    6.5 before 6.5 U1d

References 2

vmware.com

securitytracker.com